This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File:                     B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier:          buWPt1XJWpu6wy2JmsIX5+tlowYs/MoeRvPvpTB77mo=
Subject key identifier:   3C:93:2C:A5:C3:98:29:68:34:98:75:97:31:A2:B0:4B:0B:CC:60:C9
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer:       /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial:       0645
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number:          0637
Signing time:             Sat 06 Dec 2025 21:36:18 +0000
Manifest this update:     Sat 06 Dec 2025 21:36:17 +0000
Manifest next update:     Sat 13 Dec 2025 21:36:17 +0000
Files and hashes:         1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: jp1z8dMmfcCShXnA/SY+2dVnMlJHWT8eBOb9cBTaxZk=)
                          2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: sP79wAGbbrsAMI5IpKgqsFFoZmUGm0NqHRGgmh1aLzQ=)
                          3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: 0B8CEdwj7To0b9OkFucnpnuOoYqshX93UqB7JYje0u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
                          rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
        Validity
            Not Before: Dec  6 21:36:17 2025 GMT
            Not After : Dec 13 21:36:17 2025 GMT
        Subject: CN=6934a1d1-4f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:7f:db:25:d1:fb:61:e5:19:2f:ed:ed:f1:
                    17:5c:b1:51:87:8e:2f:42:e2:f8:7b:cd:b5:0a:1c:
                    93:f6:37:32:cc:a5:56:64:b3:d9:4f:7f:24:3d:ed:
                    ce:98:ec:8d:a3:ef:a7:83:df:d1:50:4d:92:5e:d4:
                    66:c7:ca:a5:74:b4:0f:dc:2e:a5:17:1f:55:cb:e8:
                    6b:a5:9e:1c:7d:83:d5:58:9b:50:8c:97:5f:72:84:
                    16:e5:1a:4a:f3:e7:84:38:c5:25:f9:91:38:00:25:
                    f6:96:fe:59:40:b3:2b:f6:63:36:e2:7f:6e:83:b2:
                    a0:fd:f4:ad:67:ab:41:e4:e8:c9:e7:8d:11:77:e0:
                    a6:e3:cc:00:c0:6b:1b:d6:f5:58:9b:9f:c2:7f:2a:
                    ca:d1:b3:06:52:fa:3e:59:07:69:62:6b:48:e1:31:
                    54:3e:04:09:5d:9a:33:47:2f:10:bc:57:1d:16:cb:
                    c0:6b:0d:3a:81:e3:0a:73:41:f9:e5:c3:1d:51:82:
                    a9:d2:91:cc:97:88:c6:36:89:7b:35:50:a8:a4:3b:
                    6a:53:50:67:97:6a:88:22:f2:27:4b:d2:67:67:f9:
                    7d:87:92:89:3a:e2:22:16:a1:f2:2e:bb:3d:a9:73:
                    09:72:6b:5c:54:4e:45:ff:ca:f2:c2:8a:f8:9e:0e:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:2C:A5:C3:98:29:68:34:98:75:97:31:A2:B0:4B:0B:CC:60:C9
            X509v3 Authority Key Identifier:
                keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ba:c3:58:3d:f4:2f:10:3b:33:c4:9c:1e:e7:85:43:f9:17:
         33:ef:c2:eb:bf:c5:05:79:d0:76:0f:d8:a5:ff:4d:b9:40:86:
         7b:50:97:c9:63:31:b5:c8:cc:c2:af:b3:e3:92:34:96:49:ac:
         7f:3a:2e:31:99:22:b2:ee:9d:a5:bc:23:fa:63:6e:ad:7e:03:
         79:d0:d4:c6:71:ef:80:a2:86:10:fb:33:79:04:69:eb:47:95:
         2e:f3:dd:6b:cd:1a:06:57:b8:bf:52:b5:c6:46:40:80:37:1d:
         28:c8:14:9b:0e:a5:03:dc:db:2c:a8:ca:5c:39:ab:3b:cb:71:
         58:36:07:aa:9b:6b:6e:ea:a2:7f:5f:00:78:58:21:25:6f:bd:
         e9:d4:44:06:e0:a3:33:a6:c5:a7:c1:00:e8:b6:3e:6c:62:95:
         d9:5d:81:16:be:76:50:c6:44:3c:de:41:82:29:b4:66:2b:36:
         8a:53:c0:22:d9:21:21:9a:99:4b:8e:3d:14:75:78:6d:59:2e:
         12:20:65:09:7a:6f:c6:37:38:2f:ba:72:7e:fa:32:a9:04:a4:
         43:ce:7e:a3:8f:d0:95:6e:ff:dd:0b:83:33:eb:10:d5:9a:b7:
         2c:89:48:ac:50:df:52:b5:ce:64:0e:2e:68:f6:f5:cc:27:0e:
         ad:98:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:55:05 2025 by rpki-client